-
Right now snyk is listed as a dependency in the package.json. This causes snyk to be installed in every project using this tool.
I think it should be a devDependency instead. That should work since t…
-
There is currently no tooling in the ci pipeline that checks for vulnerabilties in the dependencies. As far as I know there are two available tools out there, snyk.io and npm audit, that can do this f…
-
When man uses conftest push to GCR, created date is "Jan 1, 1970"
conftest Version: 0.17.1(Commit: 45177b4)
Expected
current date
In fact
 querying a database of known vulnerabilities revealed this critical security vulnerability:
```
✗ High severity vulnerabilit…
-
- **Library Version**:
- **OS**: MacOS v 10.14.6
…
-
when running ods-quickstarter tests,
docgen jenkinsfile is executed and tests seems fails.
this is the output log
```
OpenShift Build unitt-cd/run-unitt-docgen-unitt-3x-2 from https://bitbucket/sc…
-
See screenshot, looks like a sub-dependency of some dev-dependencies. Lerna and Sass look like the main culprits here.